IMPORTANT: No additional bug fixes or documentation updates
will be released for this version. For the latest information, see the
current release documentation.
Internal users
editInternal users
editThese users are designed for internal use by Elasticsearch only. Authenticating with these users is not supported.
The Elastic Stack security features use five internal users (_system, _xpack,
_xpack_security, _async_search, and _security_profile), which are responsible for the operations
that take place inside an Elasticsearch cluster.
These users are only used by requests that originate from within the cluster. For this reason, they cannot be used to authenticate against the API and there is no password to manage or reset.
From time-to-time you may find a reference to one of these users inside your logs, including audit logs.